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AMENDMENTS TO THE CLAIMS 

Claims 1-28 (canceled). 

29. (Currently amended) A method for assisting a user in verifying a cast ballot B cast stored in a 
server, the method comprising: 

forming a digital signature of B cas t using a private key of the server DS(B cast , s); 
associating the B cas t and DS(B cast , s) with a vote serial number VSN; 
forming a confirmation token, comprising 08(60351, s) and VSN; 
making the confirmationtoken available to a user; 
receiving a confirmation token made available to a user; 

extracting VSN rece ived token and DS reC eived token(B cas t, s) from the received token; and 
for VSN equal to VSN reC eived token, comparing DS re ceived token(B cas t, s) and at least one of 

DS(B cast , s) and DS(B cast , S); 
if the comparison shows equivalence between the data compared, determining that B cast is 

verified. 

30. (Previously Presented) The method of Claim 29 wherein: 

the confirmation token further comprises a digital signature of an aggregation comprising 

the associated B cast and VSN using the server's private key DS( Aggregation, s), 
extracting DS reC eived token (Aggregation, s) from the received token; and 
B cast is verified only upon the additional condition that DS reC eived token (Aggregation, s) is 
equivalent to DS(Aggregation, s). 
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3 1 . (Currently amended) A method for assisting a user in verifying a cast ballot recorded in a 
server, the method comprising: 

receiving in a server at least one set of: 
a cast ballot B cast and 

a digital signature of B cas t formed with the private key of a voter casting the ballot 
DS(B cast , v); 

forming: 

a digital signature of B cas t using a private key of the server DS(B cas t> s), 
associating B cast , DS(B cas t, v), and DS(B cast , s) with a vote serial number VSN; 

forming a confirmation token, comprising: 

DS(B cast , s), DS(B cast , v), VSN, and DS(Aggregation, s), 
where DS (Aggregation, s) is the digital signature of the aggregation of the 
associated B cast , DS(B cast , v), DS(B cast , s), and VSN; 

making the confirmation token available to a user; 

receiving a confirmation token 

extracting VSN reC eived token and at least One Of DSreceived token(B C ast, S), DSreceived token(B C ast, v), 

and DSreceived token(AG, s) from the received token; and 
for VSN r eceived token and the corresponding VSN, comparing at least one of: 

DSreceived token(B C ast> s) and DS(B cast , S); 
DSreceived token(B C ast> v), and DS(B cas t, v); 

DSreceived token(Aggregation, s), and DS(Aggregation, s); 
if comparison shows equivalence between the data compared, determining that B cas t is 
verified. 
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32. (Previously Presented) The method of Claim 31 further comprising: 

if comparison shows equivalence between DS re ceived token(Aggregation, s), and 

DS(Aggregation, s), determining that the received confirmation token has not 
been modified since its formation. 

33. (Currently Amended) A method for assisting a user verifying a cast ballot recorded in a 
server, the method comprising: 

receiving a cast ballot ("B cast ") in a server; 

forming a digital signature of B cas t using a private key of the server ("DS(B cas t , s)") 5 
associating B cast and DS(B cast , s) with a vote serial number ("VSN"); 
for VSN, comparing DS(B cast , s) and DS(B cast , S), 

if comparison shows equivalence between the data compared, determining that B cas t is 
verified. 
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